Private VLAN Configuration Task List
The following sections contain the procedures that configure a private VLAN:
•
Creating PVLAN ports
•
Creating a Primary VLAN on page 799
•
Creating a Community VLAN on page 800
•
Creating an Isolated VLAN on page 800
Creating PVLAN ports
Private VLAN ports are those that will be assigned to the private VLAN (PVLAN).
Step
Command Syntax
1
interface interface
2
no shutdown
3
switchport
4
switchport mode
private-vlan {host |
promiscuous | trunk
For interface details, see
Note: Interfaces that are configured as PVLAN ports cannot be added to regular VLANs. Conversely,
"regular" ports (ports not configured as PVLAN ports) cannot be added to PVLANs.
Figure 37-1
Figure 37-1. Examples of switchport mode private-vlan Command
798
|
Private VLANs (PVLAN)
Command Mode
CONFIGURATION
INTERFACE
INTERFACE
INTERFACE
}
Enable a Physical Interface on page 474
shows the use of the
switchport mode private-vlan
FTOS#conf
FTOS(conf)#interface GigabitEthernet 2/1
FTOS(conf-if-gi-2/1)#switchport mode private-vlan promiscuous
FTOS(conf)#interface GigabitEthernet 2/2
FTOS(conf-if-gi-2/2)#switchport mode private-vlan host
FTOS(conf)#interface GigabitEthernet 2/3
FTOS(conf-if-gi-2/3)#switchport mode private-vlan trunk
FTOS(conf)#interface GigabitEthernet 2/2
FTOS(conf-if-gi-2/2)#switchport mode private-vlan host
FTOS(conf)#interface port-channel 10
FTOS(conf-if-po-10)#switchport mode private-vlan promiscuous
Purpose
Access the INTERFACE mode for the port that you want to
assign to a PVLAN.
Enable the port.
Set the port in Layer 2 mode.
Select the PVLAN mode:
•
(port in isolated or community VLAN)
host
•
(intra-VLAN communication port)
promiscuous
•
(inter-switch PVLAN hub port)
trunk
in
Chapter 23,
command on a port and on a port channel:
Interfaces.